So feeling a bit fluey (still) I ended up sitting in bed with my notebook and I am busy with my usual thing: listening to music in the background whilst reading up on some informative sites, searching for snake pics and info in another window, going through some emails and eventually chatting to my girlfriend on MSN (using the voice function which is far inferior to Skype!).
Suddenly out of nowhere my trusty Anti-Virus pops up and tells me of some infection it detected that it wishes to remove. In a panic I delete the offending files and then start reading up on the virus “Backdoor:Win32/Lukicsel.A” (according to Microsoft Security Essentials) revealing some scary details:
Backdoor:Win32/Lukicsel.A is a backdoor trojan that allows remote access and control. It may also copy itself to removable drives.
Needless to say the first thing that comes to mind is backups however being in the industry I have that covered…so now, how did I get infected and why? According to the Microsoft site, this virus is mainly spread through removable devices:
Spreads Via…
Removable drives The malware injects code into the running process “winlogon.exe” that drops a copy of Win32/Lukicsel to removable drives as an executable. The trojan then writes an autorun configuration file named “autorun.inf” pointing to the dropped copy. When the removable drive is accessed from a machine supporting the Autorun feature, the malware is launched automatically.
The whole idea of this post is to warn you of this virus which seems to have re-emerged during the month of April. Please be sure that you have reliable anti-virus and that it is up-to-date with the latest security definitions and more importantly please run a scan of your computer as soon as you can.
You are welcome to read the original article here however be warned that it does get a bit technical. They are even kind enough to provide you with some preventative/reactive tips towards the end.
If you suspect that you have been infected please do not hesitate to contact me.
Regards,
WarBrad.